diff options
author | Richard Levitte <levitte@openssl.org> | 2020-03-10 23:08:59 +0100 |
---|---|---|
committer | Richard Levitte <levitte@openssl.org> | 2020-03-15 19:42:05 +0100 |
commit | 2292c8e17f0b870b48bb7a5f8ed8c37dfb36580f (patch) | |
tree | a1cc84c4ddd4f8eb4850c75f46b815ac0d7e81e7 /doc/man1/openssl-pkeyutl.pod.in | |
parent | aba9bca31cc2507671e25f7ca8e642fce5e38671 (diff) |
APPS: Remove all traces of special SM2 treatment.
SM2 IDs are now passed entirely as '-pkeyopt', '-sigopt' or '-vfyopt'
values, just like any other valid option.
Fixes #11293
Reviewed-by: Paul Yang <kaishen.yy@antfin.com>
(Merged from https://github.com/openssl/openssl/pull/11302)
Diffstat (limited to 'doc/man1/openssl-pkeyutl.pod.in')
-rw-r--r-- | doc/man1/openssl-pkeyutl.pod.in | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/doc/man1/openssl-pkeyutl.pod.in b/doc/man1/openssl-pkeyutl.pod.in index 583ea68734..8f9060a239 100644 --- a/doc/man1/openssl-pkeyutl.pod.in +++ b/doc/man1/openssl-pkeyutl.pod.in @@ -321,18 +321,18 @@ must be known for this to work. If the size of the file cannot be determined =head1 SM2 The SM2 algorithm supports sign, verify, encrypt and decrypt operations. For -the sign and verify operations, SM2 requires an ID string to be passed in. The -following B<-pkeyopt> value is supported: +the sign and verify operations, SM2 requires an Distinguishing ID string to +be passed in. The following B<-pkeyopt> value is supported: =over 4 -=item B<sm2_id:>I<string> +=item B<distid:>I<string> This sets the ID string used in SM2 sign or verify operations. While verifying an SM2 signature, the ID string must be the same one used when signing the data. Otherwise the verification will fail. -=item B<sm2_hex_id:>I<hex_string> +=item B<hexdistid:>I<hex_string> This sets the ID string used in SM2 sign or verify operations. While verifying an SM2 signature, the ID string must be the same one used when signing the data. @@ -382,12 +382,12 @@ Derive using the same algorithm, but read key from environment variable MYPASS: Sign some data using an L<SM2(7)> private key and a specific ID: openssl pkeyutl -sign -in file -inkey sm2.key -out sig -rawin -digest sm3 \ - -pkeyopt sm2_id:someid + -pkeyopt distid:someid Verify some data using an L<SM2(7)> certificate and a specific ID: openssl pkeyutl -verify -certin -in file -inkey sm2.cert -sigfile sig \ - -rawin -digest sm3 -pkeyopt sm2_id:someid + -rawin -digest sm3 -pkeyopt distid:someid =head1 SEE ALSO |